AI Security Engineer

Smith & Nephew plc; India; On-site; INR 2,600,000 - 4,200,000; Full time

Job summary

Smith+Naphew in Pune, India is seeking an AI Security Engineer to serve as the dedicated security engineer on enterprise AI projects from design through deployment.

You will perform threat modelling, define security requirements for AI on Microsoft platforms, review architectures, guide identity and data protection controls, and coordinate security testing and incident response with cross-functional teams.

Qualifications

• Bachelor’s degree in CS or engineering required.
• 4–7 years in application or cloud security.
• Experience with AI security and ML platforms.

Responsibilities

• Lead security engineering on enterprise AI projects.
• Perform threat modelling for AI apps, agents, copilots.
• Review AI tool architectures against enterprise standards.
• Define security requirements for Azure-based AI solutions.
• Coordinate security testing and remediation with teams.

Skills

Threat modelling

Security design reviews

Azure security

Identity & access management

Education

Bachelor's degree in Computer Science or related field

Tools

Microsoft Defender for Cloud

Microsoft Sentinel

Azure Key Vault

Entra ID

Job description

Job Title - AI Security Engineer

Location: Kharadi, Pune, India.

Life Unlimited. At Smith+Naphew, we design and manufacture technology that takes the limits off living.

What will you be doing?

• Serve as the dedicated security engineer on assigned enterprise AI projects, supporting delivery teams from design through deployment and ongoing operation.
• Perform threat modelling and security design reviews for web applications, AI agents, copilots, and their integrations with enterprise data and systems.
• Define and validate security requirements for AI solutions built on Microsoft platforms, including Azure, Microsoft Foundry, Copilot Studio, Microsoft 365 Copilot, and Power Platform.
• Review proposed AI tools and solution architectures against the approved tool list and the enterprise architecture capability map, and advise on approval status.
• Identify and help mitigate AI-specific and agentic AI risks such as prompt injection, data leakage, insecure tool and plugin use, MCP and tool integration risks, and excessive agent permissions, aligned with frameworks such as OWASP Top 10 for LLM Applications, OWASP Agentic AI threats, and NIST AI RMF.
• Guide implementation of identity, access, and data protection controls, including Microsoft Entra ID, managed identities, Azure Key Vault, Microsoft Purview, and network isolation.
• Define and validate agent identity and permission models, ensuring each AI agent uses least-privilege access to tools and data.
• Guide implementation of AI runtime protections such as an AI gateway or Azure API Management, Prompt Shields, and Azure AI Content Safety.
• Support secure development practices through code and configuration reviews, security testing, and tracking remediation of findings with development teams.
• Coordinate penetration testing for AI applications, including scoping, managing external testers, and tracking findings to closure.
• Use Microsoft security tooling such as Microsoft Defender for Cloud and Microsoft Sentinel to help monitor AI workloads and support investigation of AI-related security issues.
• Own and maintain AI incident response runbooks, and support incident handling for AI-related security events.
• Document security assessments, risks, and residual risk decisions, and elevate significant issues to the AI Security Manager.
• Contribute to AI security standards, reusable secure design patterns, and guidance, and share best practice with project teams.

What will you need to be successful?

Education: Bachelor's degree in computer science, Engineering, Information Systems or equivalent experience.

Licenses / Certifications : Microsoft security or AI certifications preferred. CISSP, CISM, or equivalent preferred.

Experience: 4 to 7 years in application security, cloud security, or security engineering, including hands-on work securing cloud or AI-enabled applications.

Domain Expertise:

• Cybersecurity, application security, and cloud security engineering, with working knowledge of risk management and compliance.
• Understanding of AI, Machine Learning, Generative AI, AI agents, and associated security risks.
• Hands-on experience with Microsoft Azure and Microsoft 365 security controls , including Microsoft Entra ID, Defender, Purview, and Sentinel.
• Familiarity with Microsoft AI platforms such as Microsoft Foundry , Azure OpenAI, Copilot Studio , and Power Platform , and their security configuration requirements.
• Understanding of agentic AI security, including agent identities and permissions, MCP and tool security, AI gateways, and Prompt Shields / Azure AI Content Safety.
• Experience securing web applications and APIs, including threat modelling, secure code review, and security testing.
• Ability to translate security requirements into practical guidance for development, platform, data, privacy, and compliance teams.

Agile / Digital Experience:

• Experience working within Agile delivery environments and product-centric organisations.
• Skilled at translating requirements into deliverable outcomes and prioritised roadmaps.
• Experience working with cross-functional teams to deliver technology and security initiatives.

Individual Skills:

• Strong collaborator who takes ownership of assigned project outcomes.
• Excellent communication and influencing skills.
• Analytical problem solver with strong decision-making capability.
• Ability to balance innovation, risk management, and business prioriti